Hello, Would anyone know if it is possible to import a list of URL's into the FMC? Or do I have to create an URL object for each URL or manually add an URL to each group? I am migrating from a different vendor, and I need to import URL lists. Thanks...
Forum Posts
Hi all, after a hard reset i try to restore the firepower 1010 from a backup. When the firewall restart i cant deply nothing because i receive this error : Some changes require that inspection engines be restarted, which will result in momentary traf...
Resolved! how to change FMC current Time
i currently have a problem with FMC time, every winter, the time zone in my country changes +-1 hour for several months, but in my FMC, the logs are showing with +1hr of my current time checking this, i notice that my preferences point to the cor...
Hello issue with ftd 1010 unit configured working perfectly but after restarting the unit I received this error from cli “all traffic destined to the ip address of the outside interface is being redirected” I’m not able to access the unit through the...
Hi Guys, I just installed FMCv 6.7 and started a 90 days trial license.FMCv was downloaded from:https://software.cisco.com/download/home/286259687/type/286271056/release/6.7.0I wanted to simulate having a pair of NGIPS in HA so I installed two instan...
We have a FMC 7.01 and we'd like to configure a new interface of the FTD, in this case the inside interface, so we can have ssh access for Management. How coud we enable this option through FMC? We have to configure this in the Platform Settings? Tha...
ERROR: unable to connect to port 8305 (IPV4): Operation now in progressINFO: No IPv4 connection to (FMC_IP)INFO: Initiate IPV4 type connectionWARNING: Unable to connect to peer (FMC_IP)INFO: reconnect to peer (FMC_IP) Anyone seen this?Keep getting er...
Resolved! FMC not seeing HTTP/HTTPS traffic
So i am trying to find out why i am unable to get on a website. I do not see any blocks in the FMC, i don't even see any traffic related to that IP. But when i try to ping it, i see the ICMP traffic in the FMC. Has anyone seen this kind of problem?
We are migrating Data Center (DC) to AWS and have 5525 Pair in DC today. CPU constantly reaching 95% and bandwidth is limited to 1Gig. The migration is going to take much longer that Management hoped due to complex nature of SaaS design. We want to p...
Resolved! Cisco ASA - SSH D(HE)ater remediation
One of our customer's Cisco ASA firewall was found vulnerable to "Diffie-Hellman Ephemeral Key Exchange DoS Vulnerability (SSH,D(HE)ater)" following a vulnerability scan.The CVE could either be CVE-2002-20001 or, most likely, CVE-2022-40735.The firmw...
Hello, Comparing with ASA the procedure for install or renew certificates on FMC is quite diferent. What would be the formal procedure for install a remote vpn certificate over 2 FTD via FMC? The same certificate can be applied to both FTD? Thanks....
Hi -I have a Cisco AIR-CAP-2602i-A-K9 unit that needs the security update as outlined in Cisco security advisory cisco-sa-20171016-wpaURL is here: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpaThis...
Resolved! Switchport Trunk Security Concerns
We are discussing the best way to place PCs onto their desired VLAN. It has been offered that we make all switchports trunks and do VLAN tagging from the PC NICs. How dangerous is this from the perspective that all switchports would be trunks?
Hello, As you can see in the title, I have to migrate a (huge) configuration from FWSM OS v4.1 to ASA OS v9.6.1 on Firepower 4100. I found the FWSM to ASA-SM migration tool - which translates the configuration to ASA-SM OS v8.5 - here: http://www.cis...
Resolved! ASA Firewall
Hi, I'm having a lab here which to design and create for a Clinic Network Environment that having access from Internal Network to External Network. When come to set for my Wi-Fi for Visitor Access-Points I was confusing above the ACL which I need to ...
